d59818e985d3f52ef1f842c78447ad481c22c7efbcea45148d0c2afa4fc53446 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d59818e985d3f52ef1f842c78447ad481c22c7efbcea45148d0c2afa4fc53446
Size

56KB
MD5

1f7eceb49cabb856682db9afbad1e741
SHA1

b1a0de0faa1cedea0f791d35200b62080934c95c
SHA256

d59818e985d3f52ef1f842c78447ad481c22c7efbcea45148d0c2afa4fc53446
SHA512

ea0a7398cc324364a3e85695901f2390a140e3bc4f8ee76c558dc7241421d07136ea683edc5523281458712307a063f88e769742ddddf68c8100f0e3ee51e3ea
SSDEEP

1536:PvqJ8G1J7Q0/eBAW3RfMVv9ftq/6yhzQhlTk:nqJ8wdz/e+sOv9lZyKY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d59818e985d3f52ef1f842c78447ad481c22c7efbcea45148d0c2afa4fc53446

Files

d59818e985d3f52ef1f842c78447ad481c22c7efbcea45148d0c2afa4fc53446
.dll regsvr32 windows x86

5d2f5abeca268ec50902fd2ebeb9c4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarTstGt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 48KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE